From 4f524db221cce7f8f2c002ff0692707b939da80f Mon Sep 17 00:00:00 2001
From: Caroline Schulte <Caroline.schulte@uni-oldenburg.de>
Date: Thu, 25 Jun 2026 22:46:14 +0200
Subject: [PATCH] Implementierung

---
 .idea/dataSources.local.xml            |  2 +-
 content/confirm-register.php           | 39 +++++++++++++++++++
 content/register.php                   |  7 ++++
 content/show-mail.php                  | 19 ++++++++++
 php/controller/register-controller.php | 52 +++++++++++++++++++++-----
 5 files changed, 109 insertions(+), 10 deletions(-)
 create mode 100644 content/confirm-register.php
 create mode 100644 content/show-mail.php

diff --git a/.idea/dataSources.local.xml b/.idea/dataSources.local.xml
index cdc31de..707e2b3 100644
--- a/.idea/dataSources.local.xml
+++ b/.idea/dataSources.local.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <project version="4">
-  <component name="dataSourceStorageLocal" created-in="IU-261.24374.151">
+  <component name="dataSourceStorageLocal" created-in="IU-253.32098.101">
     <data-source name="articles" uuid="315cb5c9-2b0f-435b-b602-59823b160908">
       <database-info product="SQLite" version="3.51.1" jdbc-version="4.2" driver-name="SQLite JDBC" driver-version="3.51.1.0" dbms="SQLITE" exact-version="3.51.1" exact-driver-version="3.51">
         <identifier-quote-string>&quot;</identifier-quote-string>
diff --git a/content/confirm-register.php b/content/confirm-register.php
new file mode 100644
index 0000000..e6af962
--- /dev/null
+++ b/content/confirm-register.php
@@ -0,0 +1,39 @@
+<?php
+
+require_once "php/model/UserManager.php";
+
+$token = basename($_GET["token"] ?? "");
+$file = "data/pending/" . $token . ".json";
+
+if (!file_exists($file)) {
+    echo "<p>Registrierungslink ungültig oder abgelaufen.</p>";
+    exit();
+}
+
+$data = json_decode(file_get_contents($file), true);
+
+if ($data === null) {
+    echo "<p>Registrierungsdaten konnten nicht gelesen werden.</p>";
+    exit();
+}
+
+try {
+    $dao = UserManager::getInstance();
+
+    if ($dao->findUser($data["email"]) === null) {
+        $dao->addUser(
+            $data["email"],
+            $data["vorname"],
+            $data["nachname"],
+            $data["password"]
+        );
+    }
+
+    unlink($file);
+
+    echo "<p>Registrierung erfolgreich abgeschlossen.</p>";
+    echo '<p><a href="index.php?pfad=login">Jetzt einloggen</a></p>';
+
+} catch (Exception $e) {
+    echo "<p>Registrierung konnte nicht abgeschlossen werden.</p>";
+}
diff --git a/content/register.php b/content/register.php
index e2b3562..548b24c 100644
--- a/content/register.php
+++ b/content/register.php
@@ -1,5 +1,6 @@
 <?php
 $error = $error ?? null;
+$success = $success ?? null;
 ?>
 
 <!--
@@ -17,6 +18,12 @@ $error = $error ?? null;
             </p>
         <?php endif; ?>
 
+        <?php if (!empty($success)): ?>
+            <p class="alert-message is-success" style="color:green;">
+                <?php echo $success; ?>
+            </p>
+        <?php endif; ?>
+
         <form method="post" action="index.php?pfad=register">
 
             <p class="input-label">Email:</p>
diff --git a/content/show-mail.php b/content/show-mail.php
new file mode 100644
index 0000000..2ff5b54
--- /dev/null
+++ b/content/show-mail.php
@@ -0,0 +1,19 @@
+<?php
+
+$token = basename($_GET["token"] ?? "");
+$file = "data/mails/" . $token . ".html";
+
+if (!file_exists($file)) {
+    echo "<p>Datei nicht gefunden.</p>";
+    exit();
+}
+
+?>
+
+<main class="login-page">
+    <div class="login-container">
+        <h1>Simulierte E-Mail</h1>
+
+        <?php include $file; ?>
+    </div>
+</main>
\ No newline at end of file
diff --git a/php/controller/register-controller.php b/php/controller/register-controller.php
index 3224eff..4835290 100644
--- a/php/controller/register-controller.php
+++ b/php/controller/register-controller.php
@@ -4,6 +4,7 @@ require_once "php/model/UserManager.php";
 require_once "php/validator/user-validator.php";
 
 $error = null;
+$success = null;
 
 if ($_SERVER["REQUEST_METHOD"] === "POST") {
 
@@ -24,20 +25,53 @@ if ($_SERVER["REQUEST_METHOD"] === "POST") {
         try {
             $dao = UserManager::getInstance();
 
-            $password = password_hash($plainPassword, PASSWORD_DEFAULT);
+            $token = bin2hex(random_bytes(16));
+            $existingUser = $dao->findUser($email);
 
-            $dao->addUser($email, $vorname, $nachname, $password);
+            if ($existingUser === null) {
+                $password = password_hash($plainPassword, PASSWORD_DEFAULT);
 
-            $_SESSION["user"] = $vorname . " " . $nachname;
-            $_SESSION["user_email"] = $email;
+                $pendingData = [
+                    "email" => $email,
+                    "vorname" => $vorname,
+                    "nachname" => $nachname,
+                    "password" => $password
+                ];
 
-            header("Location: index.php");
-            exit();
+                file_put_contents(
+                    "data/pending/" . $token . ".json",
+                    json_encode($pendingData, JSON_PRETTY_PRINT)
+                );
+
+                $mailContent = "
+                    <h2>Registrierung bestätigen</h2>
+                    <p>Bitte ignorieren Sie diese Nachricht, wenn Sie sich nicht registrieren wollten.</p>
+                    <p>
+                        <a href='index.php?pfad=confirm-register&token=$token'>
+                            Registrierung bestätigen
+                        </a>
+                    </p>
+                ";
+            } else {
+                $mailContent = "
+                    <h2>Registrierung</h2>
+                    <p>Bitte ignorieren Sie diese Nachricht, wenn Sie sich nicht registrieren wollten.</p>
+                    <p>Sie sind bereits registriert.</p>
+                    <p>
+                        <a href='index.php?pfad=password-forgotten'>
+                            Passwort vergessen
+                        </a>
+                    </p>
+                ";
+            }
+
+            file_put_contents("data/mails/" . $token . ".html", $mailContent);
+
+            $success = 'Weitere Infos finden Sie in der Datei 
+                <a href="index.php?pfad=show-mail&token=' . htmlspecialchars($token) . '" target="_blank">xy</a>.';
 
-        } catch (InvalidArgumentException $e) {
-            $error = $e->getMessage();
         } catch (Exception $e) {
-            $error = "Die Registrierung konnte nicht gespeichert werden.";
+            $error = "Die Registrierung konnte nicht verarbeitet werden.";
         }
     }
 }
\ No newline at end of file